CLOUDFLARE ACCOUNT GUIDE

How to enable 2FA on Cloudflare

Verify your email address before enabling Cloudflare two-factor authentication. Save recovery codes during setup so losing your phone does not leave you without a way to sign in.

Open mobile app authentication

  1. In the Cloudflare dashboard, open My Profile → Authentication.
  2. Under Two-Factor Authentication, choose Set up if shown.
  3. Select Add beside Mobile App Authentication.

Add Cloudflare to Sign In

You can use Sign In, our authenticator app for codes on your iPhone.

  1. With the setup QR code on another screen, open Sign In and tap Add → Scan QR Code.
  2. Scan the code, review the account details, and tap Add Account.
  3. Enter the current Sign In code and your Cloudflare password, then select Next. Confirm your password again to display backup codes.

Cloudflare’s Can’t scan QR code option provides manual setup. In Sign In, choose Add → Enter Setup Key, set Service to Cloudflare and Account to your account name, paste the secret into Key, then tap Add Account. Keep this key private.

Save the backup codes

Download, print, or copy the backup codes before finishing. Store them securely outside your phone. Each works once; generating a new set invalidates the old set.

If you cannot use your usual method, enter an unused backup code at sign-in. When a security-key prompt appears, choose try another authentication method or backup code.

Other methods and organization requirements

Security keys, built-in device authentication, and email verification are also supported. Cloudflare recommends more than one method. An organization can require 2FA for its members.

If a code does not work

Make sure the Cloudflare entry in Sign In matches the account you are using. Wait for a fresh code, then enter it before it changes. If fresh codes keep failing, check that your iPhone uses automatic date and time.

Keep a working sign-in session and your recovery information available while resolving the problem. Adding an entry to Sign In does not finish enrollment: the service must accept a code and confirm activation.

Official help